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Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of tinne may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )M Responsive to connmunication(s) filetJ on 
2s)M This action is FINAL. 2b)n This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closecj in accordance with the practice under £x parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 13 Claim(s) 1,5-8,12-15,19-22 and 25-27 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6M Claim(s) 1,5-8, 12-15, 19-22, 25-27 is/are rejected. 
/)□ Claim{s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10) 0 The drawlng(s) filed on is/are: a)^ accepted or b)n objected to by the Examiner. 
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11) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfonm PTO-152. 

Priority under 35 U.S.C. § 119 

12) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
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application from the International Bureau (PCT Rule 17.2(a)). 
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Attachment(s) 

1) □ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) □ Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) U Notice of Informal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date . 6) □ Other: . 



U.S. Patent and Trademari^ Office 
PTOL-326 (Rev. 1-04) 



Office Action Summary 



Part of Paper No./Mail Date 20040809 



Application/Control Number: 09/596,948 Page 2 

Art Unit: 2132 

DETAILED ACTION 
Response to Arguments 

1 . The rejection of the independent claim 8 under 35 USC § 101 has been overcome 
by the amendment. 

2. Applicant's amendments of claims 1,8, 14, 15, 22, 26 and 27 reflect including the 
limitations of rejected in the First Office Action and now canceled claims 2-4, 9-1 1,16- 
18 and 23-24. These limitations were fully addressed in the First Office action and are 
also addressed in the rejections herein. 

3. Referring to the independent claims 1,8, 15, 22 and 27, Applicant argues that 
Carrol does not teach to use a digital certificates with a printer, a copier, a scanner etc. 
Examiner agrees but points out that Debry discloses a secure configuration of a digital 
certificate for a printer or other network device (see abstract and Fig.1 ). 

4. Applicant further argues that Debry does not teach the usage policies including a 
policy to enable a billing function. Examiner points out that Derby teaches encrypting 
and decrypting the message request containing it's serial number (see abstract), which 
meets the limitation "encrypting/ decrypting of policy information". The serial number is 
associated with the operation permission of the printer - usage policy. Carrol teaches 
using the system for electronic payments and billing functions (see Fig. 3A-B). The 
combination of teachings of Carrol and Derby renders Applicant invention obvious for 
the following reasons: 

At the time the invention was made, it would have been obvious to one of ordinary skill 
in the art to modify the secure server system of Carroll, which uses the digital certificate 
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of a network user for enabling operation of the network device such as enabling 
electronic paynnents and billing functions, by having the encryption key stored in the 
printer as taught in Debry. One of ordinary skill in the art would have been motivated to 
modify the secure server system, which uses the digital certificate of a network user for 
enabling operation of the network device, by having the encryption key stored in the 
network device as taught in Debry for use in authenticating (see abstract). 
5. After giving a thorough consideration to Applicant's remarks and amendments of 
the claims, examiner maintains rejections of claims 1, 5-8, 12-15, 19-22 and 25-27. 



Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 1, 5-8, 12-15, 19-22 and 25-27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Carroll (U.S. Patent No. 6.105.131) in view of Debry (U.S. 
Patent No. 6.314.521 B1). 

8. Referring to the instant claims, Carroll discloses a secure server and method of 
operation for a distributed information system (see abstract and Fig.1). 

Carroll teaches a user terminal 18 includes an application 26, for example a browser, 
that is responsive to user input and connects to remote applications across a computer 
network 14. Keys used for encryption and authentication are managed by built-in key 
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ring organizer 27 in the browser 26 (see Fig.1 ). Carroll teaches that authentication 
includes reliably determining the identity of a network device contacting the secure 
application (see column 3, lines 19-21). Carroll teaches that the user terminal 18 (FIG. 
1 ) contacts the organization server 66 over the computer network 14 (FIG. 1 ) and 
transmits access request and the digital certificate (see column 7, lines 55-60). 

9. Referring to the independent claims 1, 8, 15 and 22, the limitation "assigning a 
digital certificate to a network user" is met by the Certificate Management System, 
which transmits a digital certificate to the user's personal vault and the process in the 
personal vault then transmits the new digital certificate to the user's browser (see 
column 8, lines 37-39). The limitation "receiving a command for operation of a network 
device and the digital certificate from the network user" is met by the user terminal 18 
(FIG. 1) contacting the organization server 66 over the computer network 14 (FIG. 1) 
and transmitting access request and the digital certificate (see column 7, lines 55-60). 
The limitation "enabling operation of the network device if the digital certificate of the 
network user is authenticated" is met by teaching that, if the application server verifies 
the digital certificate, the user terminal is granted access to the application (i.e. device) - 
see column 9, lines 1-4. While Carroll teaches the use of the built-in key ring organizer 
27 in the browser 26 (in Fig. 1), he does not explicitly teach using a cryptographic key 
stored in the network device for authenticating the digital certificate of the network user. 

10. Referring to the instant claims, Debry discloses a Secure configuration of a digital 
certificate for a printer or other network device (see abstract and Fig.1 ). Debry teaches 
that the printer has a unique encryption key stored in it at manufacturing time. This key 
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is also recorded in a database, securely controlled by a certificate authority (see 
abstract). This key is used for authentication of a digital certificate (see Fig.1 unit 50). 
Therefore, at the time the invention was made, it would have been obvious to one of 
ordinary skill in the art to modify the secure server system of Carroll, which uses the 
digital certificate of a network user for enabling operation of the network device, by 
having the encryption key stored In the printer (i.e. network device) as taught in Debry. 
One of ordinary skill in the art would have been motivated to modify the secure server 
system, which uses the digital certificate of a network user for enabling operation of the 
network device, by having the encryption key stored in the network device as taught in 
Debry for use in authenticating (see abstract). 

1 1 . Referring to claims 1 , 8 and 27, Derby teaches encrypting and decrypting the 
message request containing if s serial number (see abstract), which meets the limitation 
"encrypting/ decrypting of policy information". The serial number is associated with the 
operation permission of the printer (i.e. usage policy). 

12. Referring to claims 1, 8 and 15, Debry explicitly teaches a network device being 
a printer. 

13. Referring to claim 5, 12 and 19, Carroll teaches that the network user is another 
network device (see Fig.1) - network user is a client (18) connected to the servers (12 
and 66) over the network (10). 

14. Referring to claims 6, 13, 20, Carroll teaches that the user terminal 18 (FIG. 1) 
contacts the organization server 66 over the computer network 14 (FIG. 1 ) and 
transmits access request and the digital certificate (see column 7, lines 55-60). 
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1 5. Referring to claim 1 , 8, 1 5, 22 and 27, Carroll teaches using the system for 
electronic payments and billing functions (see Fig. 3A-B). 

16. Referring to claim 26, Carroll teaches the limitation "command for operation of the 
network device is re-routed to the second network device..." - see Fig.1 . Either the 
server 12 or the server 66 meet the second network device where the command is re- 
routed to. 

Conclusion 

17. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is (703) 
306-2900. The examiner can normally be reached on 9 AM-5:30 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (703) 305-1830. The fax phone number 
for the organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the TC 2100 receptionist whose telephone number is 
(703) 305-3900. 

Grigory Gurshman 
Examiner 
Art Unit 2132 
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